@portaidentity/server 1.7.3 → 1.8.0

package/dist/portability/plan.js

@@ -0,0 +1,450 @@
+/** Mutation-free normalization, dependency resolution, and import action planning. */
+import { runDatabaseTransaction } from '../lib/database.js';
+import { validateClaimValue } from '../custom-claims/validators.js';
+import { readPortabilityImportSnapshot, } from './import-repository.js';
+import { addError, addItem, applicationIsSelected, clientMutableValuesMatch, compareOutcomes, dependencyState, emptySummary, groupByKey, key, normalizedEmail, normalizedRbac, normalizedSlug, organizationMatches, parentError, recordAction, recordIdentity, rejectDuplicates, sameValue, userMatches, validateRootScope, } from './plan-support.js';
+import { portabilityManifestSchema, portabilityResultSchema } from './schema.js';
+/**
+ * Build the resolved plan using the current request-owned transaction.
+ *
+ * Apply uses this boundary so preview and mutation share the same normalization,
+ * compatibility, and dependency checks.
+ *
+ * @param input - Manifest received by the service
+ * @param mode - Requested preview or apply behavior
+ * @returns Normalized manifest, private snapshot, and safe public result
+ */
+export async function buildResolvedPortabilityPlan(input, mode) {
+    const manifest = portabilityManifestSchema.parse(input);
+    const snapshot = await readPortabilityImportSnapshot(manifest);
+    const accumulator = { items: [], errors: [], summary: emptySummary() };
+    const duplicateRecords = rejectDuplicates(manifest, accumulator);
+    const organizations = groupByKey(snapshot.organizations, (row) => normalizedSlug(row.slug));
+    const brandingAssets = groupByKey(snapshot.brandingAssets, (row) => normalizedSlug(row.organization_slug));
+    const applications = groupByKey(snapshot.applications, (row) => normalizedSlug(row.slug));
+    const modules = groupByKey(snapshot.applicationModules, (row) => key(normalizedSlug(row.application_slug), normalizedSlug(row.slug)));
+    const roles = groupByKey(snapshot.roles, (row) => key(normalizedSlug(row.application_slug), normalizedRbac(row.slug)));
+    const permissions = groupByKey(snapshot.permissions, (row) => key(normalizedSlug(row.application_slug), normalizedRbac(row.slug)));
+    const claims = groupByKey(snapshot.claimDefinitions, (row) => key(normalizedSlug(row.application_slug), row.claim_name));
+    const users = groupByKey(snapshot.users, (row) => key(normalizedSlug(row.organization_slug), normalizedEmail(row.email)));
+    const clients = groupByKey(snapshot.clients, (row) => row.client_id);
+    const manifestOrganizations = new Set(manifest.organizations.map((row) => normalizedSlug(row.slug)));
+    const manifestApplications = new Set(manifest.applications.map((row) => normalizedSlug(row.slug)));
+    const manifestModules = new Set(manifest.application_modules.map((row) => key(normalizedSlug(row.application_slug), normalizedSlug(row.slug))));
+    const manifestRoles = new Set(manifest.roles.map((row) => key(normalizedSlug(row.application_slug), normalizedRbac(row.slug))));
+    const manifestPermissions = new Set(manifest.permissions.map((row) => key(normalizedSlug(row.application_slug), normalizedRbac(row.slug))));
+    const manifestClaims = new Set(manifest.claim_definitions.map((row) => key(normalizedSlug(row.application_slug), row.claim_name)));
+    const manifestUsers = new Set(manifest.users.map((row) => key(normalizedSlug(row.organization_slug), normalizedEmail(row.email))));
+    const selectedOrganization = manifest.scope.kind === 'organization'
+        ? normalizedSlug(manifest.scope.organization_slug)
+        : null;
+    validateRootScope(manifest, accumulator, organizations, manifestOrganizations);
+    for (const source of manifest.organizations) {
+        const naturalKey = { slug: source.slug };
+        if (duplicateRecords.has(recordIdentity('organizations', naturalKey)))
+            continue;
+        if (selectedOrganization !== null && normalizedSlug(source.slug) !== selectedOrganization) {
+            addError(accumulator, 'organizations', naturalKey, 'cross_scope_reference');
+            continue;
+        }
+        if (source.slug === 'porta-admin') {
+            addError(accumulator, 'organizations', naturalKey, 'control_plane_record');
+            continue;
+        }
+        const matches = organizations.get(normalizedSlug(source.slug));
+        if ((matches?.length ?? 0) > 1) {
+            addError(accumulator, 'organizations', naturalKey, 'ambiguous_dependency');
+            continue;
+        }
+        const destination = matches?.[0];
+        if (destination?.is_super_admin) {
+            addError(accumulator, 'organizations', naturalKey, 'control_plane_record');
+            continue;
+        }
+        addItem(accumulator, 'organizations', recordAction(mode, destination !== undefined, destination !== undefined &&
+            organizationMatches(source, destination, new Map((brandingAssets.get(normalizedSlug(source.slug)) ?? []).map((asset) => [
+                asset.asset_type,
+                { content_type: asset.content_type, data: asset.data },
+            ])))), naturalKey);
+    }
+    for (const source of manifest.applications) {
+        const naturalKey = { slug: source.slug };
+        if (duplicateRecords.has(recordIdentity('applications', naturalKey)))
+            continue;
+        if (!applicationIsSelected(manifest, source.slug)) {
+            addError(accumulator, 'applications', naturalKey, 'cross_scope_reference');
+            continue;
+        }
+        if (source.slug === 'porta-admin') {
+            addError(accumulator, 'applications', naturalKey, 'control_plane_record');
+            continue;
+        }
+        const matches = applications.get(normalizedSlug(source.slug));
+        if ((matches?.length ?? 0) > 1) {
+            addError(accumulator, 'applications', naturalKey, 'ambiguous_dependency');
+            continue;
+        }
+        const destination = matches?.[0];
+        const same = destination !== undefined &&
+            source.name === destination.name &&
+            source.description === destination.description &&
+            source.status === destination.status;
+        addItem(accumulator, 'applications', recordAction(mode, destination !== undefined, same), naturalKey);
+    }
+    for (const source of manifest.application_modules) {
+        const naturalKey = { application_slug: source.application_slug, slug: source.slug };
+        const appKey = normalizedSlug(source.application_slug);
+        if (duplicateRecords.has(recordIdentity('application_modules', naturalKey)))
+            continue;
+        if (!applicationIsSelected(manifest, source.application_slug)) {
+            addError(accumulator, 'application_modules', naturalKey, 'cross_scope_reference');
+            continue;
+        }
+        const dependency = parentError(manifestApplications.has(appKey), applications.get(appKey));
+        if (appKey === 'porta-admin')
+            addError(accumulator, 'application_modules', naturalKey, 'control_plane_record');
+        else if (dependency !== null)
+            addError(accumulator, 'application_modules', naturalKey, dependency);
+        else {
+            const matches = modules.get(key(appKey, normalizedSlug(source.slug)));
+            if ((matches?.length ?? 0) > 1) {
+                addError(accumulator, 'application_modules', naturalKey, 'ambiguous_dependency');
+                continue;
+            }
+            const destination = matches?.[0];
+            const same = destination !== undefined &&
+                source.name === destination.name &&
+                source.description === destination.description &&
+                source.status === destination.status;
+            addItem(accumulator, 'application_modules', recordAction(mode, destination !== undefined, same), naturalKey);
+        }
+    }
+    for (const source of manifest.roles) {
+        const naturalKey = { application_slug: source.application_slug, slug: source.slug };
+        const appKey = normalizedSlug(source.application_slug);
+        if (duplicateRecords.has(recordIdentity('roles', naturalKey)))
+            continue;
+        if (!applicationIsSelected(manifest, source.application_slug)) {
+            addError(accumulator, 'roles', naturalKey, 'cross_scope_reference');
+            continue;
+        }
+        const dependency = parentError(manifestApplications.has(appKey), applications.get(appKey));
+        if (appKey === 'porta-admin')
+            addError(accumulator, 'roles', naturalKey, 'control_plane_record');
+        else if (dependency !== null)
+            addError(accumulator, 'roles', naturalKey, dependency);
+        else {
+            const matches = roles.get(key(appKey, normalizedRbac(source.slug)));
+            if ((matches?.length ?? 0) > 1) {
+                addError(accumulator, 'roles', naturalKey, 'ambiguous_dependency');
+                continue;
+            }
+            const destination = matches?.[0];
+            const same = destination !== undefined &&
+                source.name === destination.name &&
+                source.description === destination.description;
+            addItem(accumulator, 'roles', recordAction(mode, destination !== undefined, same), naturalKey);
+        }
+    }
+    for (const source of manifest.permissions) {
+        const naturalKey = { application_slug: source.application_slug, slug: source.slug };
+        const appKey = normalizedSlug(source.application_slug);
+        if (duplicateRecords.has(recordIdentity('permissions', naturalKey)))
+            continue;
+        if (!applicationIsSelected(manifest, source.application_slug)) {
+            addError(accumulator, 'permissions', naturalKey, 'cross_scope_reference');
+            continue;
+        }
+        const dependency = parentError(manifestApplications.has(appKey), applications.get(appKey));
+        if (appKey === 'porta-admin') {
+            addError(accumulator, 'permissions', naturalKey, 'control_plane_record');
+            continue;
+        }
+        if (dependency !== null) {
+            addError(accumulator, 'permissions', naturalKey, dependency);
+            continue;
+        }
+        if (source.module_slug !== null) {
+            const moduleKey = key(appKey, normalizedSlug(source.module_slug));
+            const moduleDependency = parentError(manifestModules.has(moduleKey), modules.get(moduleKey));
+            if (moduleDependency !== null) {
+                addError(accumulator, 'permissions', naturalKey, moduleDependency);
+                continue;
+            }
+        }
+        const matches = permissions.get(key(appKey, normalizedRbac(source.slug)));
+        if ((matches?.length ?? 0) > 1) {
+            addError(accumulator, 'permissions', naturalKey, 'ambiguous_dependency');
+            continue;
+        }
+        const destination = matches?.[0];
+        if (destination !== undefined &&
+            normalizedSlug(destination.module_slug ?? '') !== normalizedSlug(source.module_slug ?? '')) {
+            addError(accumulator, 'permissions', naturalKey, 'incompatible_record');
+            continue;
+        }
+        const same = destination !== undefined &&
+            source.name === destination.name &&
+            source.description === destination.description;
+        addItem(accumulator, 'permissions', recordAction(mode, destination !== undefined, same), naturalKey);
+    }
+    for (const source of manifest.claim_definitions) {
+        const naturalKey = { application_slug: source.application_slug, claim_name: source.claim_name };
+        const appKey = normalizedSlug(source.application_slug);
+        if (duplicateRecords.has(recordIdentity('claim_definitions', naturalKey)))
+            continue;
+        if (!applicationIsSelected(manifest, source.application_slug)) {
+            addError(accumulator, 'claim_definitions', naturalKey, 'cross_scope_reference');
+            continue;
+        }
+        const dependency = parentError(manifestApplications.has(appKey), applications.get(appKey));
+        if (appKey === 'porta-admin')
+            addError(accumulator, 'claim_definitions', naturalKey, 'control_plane_record');
+        else if (dependency !== null)
+            addError(accumulator, 'claim_definitions', naturalKey, dependency);
+        else {
+            const matches = claims.get(key(appKey, source.claim_name));
+            if ((matches?.length ?? 0) > 1) {
+                addError(accumulator, 'claim_definitions', naturalKey, 'ambiguous_dependency');
+                continue;
+            }
+            const destination = matches?.[0];
+            if (destination !== undefined && destination.claim_type !== source.claim_type) {
+                addError(accumulator, 'claim_definitions', naturalKey, 'incompatible_record');
+                continue;
+            }
+            const same = destination !== undefined &&
+                source.description === destination.description &&
+                source.include_in_id_token === destination.include_in_id_token &&
+                source.include_in_access_token === destination.include_in_access_token &&
+                source.include_in_userinfo === destination.include_in_userinfo;
+            addItem(accumulator, 'claim_definitions', recordAction(mode, destination !== undefined, same), naturalKey);
+        }
+    }
+    const rolePermissionEdges = new Set(snapshot.rolePermissions.flatMap((row) => row.permission_slugs.map((permissionSlug) => key(normalizedSlug(row.application_slug), normalizedRbac(row.role_slug), normalizedRbac(permissionSlug)))));
+    for (const source of manifest.role_permission_mappings) {
+        const naturalKey = { application_slug: source.application_slug, role_slug: source.role_slug };
+        const appKey = normalizedSlug(source.application_slug);
+        const roleKey = key(appKey, normalizedRbac(source.role_slug));
+        if (duplicateRecords.has(recordIdentity('role_permission_mappings', naturalKey)))
+            continue;
+        if (!applicationIsSelected(manifest, source.application_slug)) {
+            addError(accumulator, 'role_permission_mappings', naturalKey, 'cross_scope_reference');
+            continue;
+        }
+        let error = appKey === 'porta-admin'
+            ? 'control_plane_record'
+            : parentError(manifestRoles.has(roleKey), roles.get(roleKey));
+        for (const permissionSlug of source.permission_slugs) {
+            if (error !== null)
+                break;
+            const permissionKey = key(appKey, normalizedRbac(permissionSlug));
+            if (manifestPermissions.has(permissionKey) ||
+                dependencyState(permissions.get(permissionKey)) === 'resolved')
+                continue;
+            const elsewhere = manifest.permissions.some((row) => normalizedRbac(row.slug) === normalizedRbac(permissionSlug)) ||
+                snapshot.permissions.some((row) => normalizedRbac(row.slug) === normalizedRbac(permissionSlug));
+            error = elsewhere ? 'cross_scope_reference' : 'missing_dependency';
+        }
+        if (error !== null) {
+            addError(accumulator, 'role_permission_mappings', naturalKey, error);
+            continue;
+        }
+        const existingEdges = source.permission_slugs.filter((slug) => rolePermissionEdges.has(key(appKey, normalizedRbac(source.role_slug), normalizedRbac(slug)))).length;
+        const action = existingEdges === source.permission_slugs.length
+            ? 'skipped'
+            : existingEdges === 0
+                ? 'created'
+                : 'updated';
+        addItem(accumulator, 'role_permission_mappings', action, naturalKey);
+    }
+    for (const source of manifest.users) {
+        const naturalKey = { organization_slug: source.organization_slug, email: source.email };
+        const orgKey = normalizedSlug(source.organization_slug);
+        if (duplicateRecords.has(recordIdentity('users', naturalKey)))
+            continue;
+        if (selectedOrganization !== null && orgKey !== selectedOrganization) {
+            addError(accumulator, 'users', { organization_slug: source.organization_slug, email: '[redacted]' }, 'cross_scope_reference');
+            continue;
+        }
+        const dependency = parentError(manifestOrganizations.has(orgKey), organizations.get(orgKey));
+        if (orgKey === 'porta-admin')
+            addError(accumulator, 'users', naturalKey, 'control_plane_record');
+        else if (dependency !== null)
+            addError(accumulator, 'users', naturalKey, dependency);
+        else {
+            const matches = users.get(key(orgKey, normalizedEmail(source.email)));
+            if ((matches?.length ?? 0) > 1) {
+                addError(accumulator, 'users', naturalKey, 'ambiguous_dependency');
+                continue;
+            }
+            const destination = matches?.[0];
+            addItem(accumulator, 'users', recordAction(mode, destination !== undefined, destination !== undefined && userMatches(source, destination)), naturalKey);
+        }
+    }
+    const userRoleEdges = new Set(snapshot.userRoles.map((row) => key(normalizedSlug(row.organization_slug), normalizedEmail(row.email), normalizedSlug(row.application_slug), normalizedRbac(row.role_slug))));
+    for (const source of manifest.user_role_assignments) {
+        const naturalKey = {
+            organization_slug: source.organization_slug,
+            email: source.email,
+            application_slug: source.application_slug,
+            role_slug: source.role_slug,
+        };
+        const orgKey = normalizedSlug(source.organization_slug);
+        const appKey = normalizedSlug(source.application_slug);
+        const userKey = key(orgKey, normalizedEmail(source.email));
+        const roleKey = key(appKey, normalizedRbac(source.role_slug));
+        if (duplicateRecords.has(recordIdentity('user_role_assignments', naturalKey)))
+            continue;
+        let error = null;
+        if (!applicationIsSelected(manifest, source.application_slug))
+            error = 'cross_scope_reference';
+        else if (selectedOrganization !== null && orgKey !== selectedOrganization)
+            error = 'cross_scope_reference';
+        else if (orgKey === 'porta-admin' || appKey === 'porta-admin')
+            error = 'control_plane_record';
+        else if (!manifestUsers.has(userKey) && dependencyState(users.get(userKey)) !== 'resolved') {
+            const elsewhere = manifest.users.some((row) => normalizedEmail(row.email) === normalizedEmail(source.email)) ||
+                snapshot.users.some((row) => normalizedEmail(row.email) === normalizedEmail(source.email));
+            error = elsewhere ? 'cross_scope_reference' : 'missing_dependency';
+        }
+        else if (!manifestRoles.has(roleKey) && dependencyState(roles.get(roleKey)) !== 'resolved') {
+            const elsewhere = manifest.roles.some((row) => normalizedRbac(row.slug) === normalizedRbac(source.role_slug)) ||
+                snapshot.roles.some((row) => normalizedRbac(row.slug) === normalizedRbac(source.role_slug));
+            error = elsewhere ? 'cross_scope_reference' : 'missing_dependency';
+        }
+        if (error !== null)
+            addError(accumulator, 'user_role_assignments', error === 'cross_scope_reference'
+                ? {
+                    organization_slug: source.organization_slug,
+                    email: '[redacted]',
+                    application_slug: source.application_slug,
+                    role_slug: source.role_slug,
+                }
+                : naturalKey, error);
+        else
+            addItem(accumulator, 'user_role_assignments', userRoleEdges.has(key(orgKey, normalizedEmail(source.email), appKey, normalizedRbac(source.role_slug)))
+                ? 'skipped'
+                : 'created', naturalKey);
+    }
+    const claimValues = groupByKey(snapshot.userClaimValues, (row) => key(normalizedSlug(row.organization_slug), normalizedEmail(row.email), normalizedSlug(row.application_slug), row.claim_name));
+    for (const source of manifest.user_claim_values) {
+        const naturalKey = {
+            organization_slug: source.organization_slug,
+            email: source.email,
+            application_slug: source.application_slug,
+            claim_name: source.claim_name,
+        };
+        const orgKey = normalizedSlug(source.organization_slug);
+        const appKey = normalizedSlug(source.application_slug);
+        const userKey = key(orgKey, normalizedEmail(source.email));
+        const claimKey = key(appKey, source.claim_name);
+        if (duplicateRecords.has(recordIdentity('user_claim_values', naturalKey)))
+            continue;
+        let error = null;
+        if (!applicationIsSelected(manifest, source.application_slug))
+            error = 'cross_scope_reference';
+        else if (selectedOrganization !== null && orgKey !== selectedOrganization)
+            error = 'cross_scope_reference';
+        else if (orgKey === 'porta-admin' || appKey === 'porta-admin')
+            error = 'control_plane_record';
+        else if (!manifestUsers.has(userKey) && dependencyState(users.get(userKey)) !== 'resolved')
+            error = 'missing_dependency';
+        else if (!manifestClaims.has(claimKey) &&
+            dependencyState(claims.get(claimKey)) !== 'resolved') {
+            const elsewhere = manifest.claim_definitions.some((row) => row.claim_name === source.claim_name) ||
+                snapshot.claimDefinitions.some((row) => row.claim_name === source.claim_name);
+            error = elsewhere ? 'cross_scope_reference' : 'missing_dependency';
+        }
+        const claimType = manifest.claim_definitions.find((definition) => normalizedSlug(definition.application_slug) === appKey &&
+            definition.claim_name === source.claim_name)?.claim_type ?? claims.get(claimKey)?.[0]?.claim_type;
+        if (error === null &&
+            (claimType === undefined || !validateClaimValue(claimType, source.value).valid)) {
+            error = 'invalid_record';
+        }
+        if (error !== null)
+            addError(accumulator, 'user_claim_values', error === 'cross_scope_reference'
+                ? {
+                    organization_slug: source.organization_slug,
+                    email: '[redacted]',
+                    application_slug: source.application_slug,
+                    claim_name: source.claim_name,
+                }
+                : naturalKey, error);
+        else {
+            const matches = claimValues.get(key(orgKey, normalizedEmail(source.email), appKey, source.claim_name));
+            if ((matches?.length ?? 0) > 1) {
+                addError(accumulator, 'user_claim_values', naturalKey, 'ambiguous_dependency');
+                continue;
+            }
+            const destination = matches?.[0];
+            addItem(accumulator, 'user_claim_values', recordAction(mode, destination !== undefined, destination !== undefined && sameValue(source.value, destination.value)), naturalKey);
+        }
+    }
+    for (const source of manifest.clients) {
+        const naturalKey = { client_id: source.client_id };
+        const orgKey = normalizedSlug(source.organization_slug);
+        const appKey = normalizedSlug(source.application_slug);
+        if (duplicateRecords.has(recordIdentity('clients', naturalKey)))
+            continue;
+        if (!applicationIsSelected(manifest, source.application_slug)) {
+            addError(accumulator, 'clients', naturalKey, 'cross_scope_reference');
+            continue;
+        }
+        if (selectedOrganization !== null && orgKey !== selectedOrganization) {
+            addError(accumulator, 'clients', naturalKey, 'cross_scope_reference');
+            continue;
+        }
+        if (orgKey === 'porta-admin' || appKey === 'porta-admin') {
+            addError(accumulator, 'clients', naturalKey, 'control_plane_record');
+            continue;
+        }
+        const matches = clients.get(source.client_id);
+        if ((matches?.length ?? 0) > 1) {
+            addError(accumulator, 'clients', naturalKey, 'ambiguous_dependency');
+            continue;
+        }
+        const destination = matches?.[0];
+        if (destination !== undefined &&
+            (normalizedSlug(destination.organization_slug) !== orgKey ||
+                normalizedSlug(destination.application_slug) !== appKey)) {
+            addError(accumulator, 'clients', naturalKey, 'client_id_collision');
+            continue;
+        }
+        if (destination === undefined) {
+            const orgDependency = parentError(manifestOrganizations.has(orgKey), organizations.get(orgKey));
+            const appDependency = parentError(manifestApplications.has(appKey), applications.get(appKey));
+            if (orgDependency !== null || appDependency !== null) {
+                addError(accumulator, 'clients', naturalKey, orgDependency ?? appDependency ?? 'missing_dependency');
+                continue;
+            }
+        }
+        if (destination !== undefined &&
+            (destination.client_type !== source.client_type ||
+                destination.application_type !== source.application_type)) {
+            addError(accumulator, 'clients', naturalKey, 'incompatible_record');
+            continue;
+        }
+        addItem(accumulator, 'clients', recordAction(mode, destination !== undefined, destination !== undefined && clientMutableValuesMatch(source, destination)), naturalKey, destination === undefined && source.client_type === 'confidential');
+    }
+    const result = portabilityResultSchema.parse({
+        mode,
+        summary: accumulator.summary,
+        items: accumulator.errors.length > 0 ? [] : accumulator.items.sort(compareOutcomes),
+        errors: accumulator.errors.sort(compareOutcomes),
+    });
+    return { manifest, snapshot, result };
+}
+/**
+ * Build a safe preview result without changing product, credential, or audit records.
+ *
+ * @param manifest - Complete manifest received from an import request
+ * @param mode - Import behavior represented by the plan
+ * @returns Ordered safe plan result
+ * @example
+ * const preview = await buildPortabilityPlan(manifest, 'dry-run');
+ */
+export async function buildPortabilityPlan(manifest, mode) {
+    return runDatabaseTransaction(async () => (await buildResolvedPortabilityPlan(manifest, mode)).result);
+}
+//# sourceMappingURL=plan.js.map

package/dist/portability/plan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan.js","sourceRoot":"","sources":["../../src/portability/plan.ts"],"names":[],"mappings":"AAAA,sFAAsF;AAEtF,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EACL,6BAA6B,GAE9B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,QAAQ,EACR,OAAO,EACP,qBAAqB,EACrB,wBAAwB,EACxB,eAAe,EACf,eAAe,EACf,YAAY,EACZ,UAAU,EACV,GAAG,EACH,eAAe,EACf,cAAc,EACd,cAAc,EACd,mBAAmB,EACnB,WAAW,EACX,YAAY,EACZ,cAAc,EACd,gBAAgB,EAChB,SAAS,EAET,WAAW,EACX,iBAAiB,GAClB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,yBAAyB,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAmBjF;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,KAA0B,EAC1B,IAA2B;IAE3B,MAAM,QAAQ,GAAG,yBAAyB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,MAAM,6BAA6B,CAAC,QAAQ,CAAC,CAAC;IAC/D,MAAM,WAAW,GAAoB,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,EAAE,CAAC;IACxF,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAEjE,MAAM,aAAa,GAAG,UAAU,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5F,MAAM,cAAc,GAAG,UAAU,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC,GAAG,EAAE,EAAE,CACjE,cAAc,CAAC,GAAG,CAAC,iBAAiB,CAAC,CACtC,CAAC;IACF,MAAM,YAAY,GAAG,UAAU,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1F,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC,GAAG,EAAE,EAAE,CAC9D,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CACpE,CAAC;IACF,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CAC/C,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CACpE,CAAC;IACF,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,GAAG,EAAE,EAAE,CAC3D,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CACpE,CAAC;IACF,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,gBAAgB,EAAE,CAAC,GAAG,EAAE,EAAE,CAC3D,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,GAAG,CAAC,UAAU,CAAC,CAC1D,CAAC;IACF,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CAC/C,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CACvE,CAAC;IACF,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAErE,MAAM,qBAAqB,GAAG,IAAI,GAAG,CACnC,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAC9D,CAAC;IACF,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAClC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAC7D,CAAC;IACF,MAAM,eAAe,GAAG,IAAI,GAAG,CAC7B,QAAQ,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CACvC,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CACpE,CACF,CAAC;IACF,MAAM,aAAa,GAAG,IAAI,GAAG,CAC3B,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CACzB,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CACpE,CACF,CAAC;IACF,MAAM,mBAAmB,GAAG,IAAI,GAAG,CACjC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAC/B,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CACpE,CACF,CAAC;IACF,MAAM,cAAc,GAAG,IAAI,GAAG,CAC5B,QAAQ,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CACrC,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,GAAG,CAAC,UAAU,CAAC,CAC1D,CACF,CAAC;IACF,MAAM,aAAa,GAAG,IAAI,GAAG,CAC3B,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CACzB,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CACvE,CACF,CAAC;IACF,MAAM,oBAAoB,GACxB,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,cAAc;QACpC,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC,iBAAiB,CAAC;QAClD,CAAC,CAAC,IAAI,CAAC;IACX,iBAAiB,CAAC,QAAQ,EAAE,WAAW,EAAE,aAAa,EAAE,qBAAqB,CAAC,CAAC;IAE/E,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,aAAa,EAAE,CAAC;QAC5C,MAAM,UAAU,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;QACzC,IAAI,gBAAgB,CAAC,GAAG,CAAC,cAAc,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;YAAE,SAAS;QAChF,IAAI,oBAAoB,KAAK,IAAI,IAAI,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,oBAAoB,EAAE,CAAC;YAC1F,QAAQ,CAAC,WAAW,EAAE,eAAe,EAAE,UAAU,EAAE,uBAAuB,CAAC,CAAC;YAC5E,SAAS;QACX,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YAClC,QAAQ,CAAC,WAAW,EAAE,eAAe,EAAE,UAAU,EAAE,sBAAsB,CAAC,CAAC;YAC3E,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/D,IAAI,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/B,QAAQ,CAAC,WAAW,EAAE,eAAe,EAAE,UAAU,EAAE,sBAAsB,CAAC,CAAC;YAC3E,SAAS;QACX,CAAC;QACD,MAAM,WAAW,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;QACjC,IAAI,WAAW,EAAE,cAAc,EAAE,CAAC;YAChC,QAAQ,CAAC,WAAW,EAAE,eAAe,EAAE,UAAU,EAAE,sBAAsB,CAAC,CAAC;YAC3E,SAAS;QACX,CAAC;QACD,OAAO,CACL,WAAW,EACX,eAAe,EACf,YAAY,CACV,IAAI,EACJ,WAAW,KAAK,SAAS,EACzB,WAAW,KAAK,SAAS;YACvB,mBAAmB,CACjB,MAAM,EACN,WAAW,EACX,IAAI,GAAG,CACL,CAAC,cAAc,CAAC,GAAG,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;gBACrE,KAAK,CAAC,UAAU;gBAChB,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE;aACvD,CAAC,CACH,CACF,CACJ,EACD,UAAU,CACX,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;QAC3C,MAAM,UAAU,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;QACzC,IAAI,gBAAgB,CAAC,GAAG,CAAC,cAAc,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;YAAE,SAAS;QAC/E,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YAClD,QAAQ,CAAC,WAAW,EAAE,cAAc,EAAE,UAAU,EAAE,uBAAuB,CAAC,CAAC;YAC3E,SAAS;QACX,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YAClC,QAAQ,CAAC,WAAW,EAAE,cAAc,EAAE,UAAU,EAAE,sBAAsB,CAAC,CAAC;YAC1E,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9D,IAAI,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/B,QAAQ,CAAC,WAAW,EAAE,cAAc,EAAE,UAAU,EAAE,sBAAsB,CAAC,CAAC;YAC1E,SAAS;QACX,CAAC;QACD,MAAM,WAAW,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,IAAI,GACR,WAAW,KAAK,SAAS;YACzB,MAAM,CAAC,IAAI,KAAK,WAAW,CAAC,IAAI;YAChC,MAAM,CAAC,WAAW,KAAK,WAAW,CAAC,WAAW;YAC9C,MAAM,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM,CAAC;QACvC,OAAO,CACL,WAAW,EACX,cAAc,EACd,YAAY,CAAC,IAAI,EAAE,WAAW,KAAK,SAAS,EAAE,IAAI,CAAC,EACnD,UAAU,CACX,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,mBAAmB,EAAE,CAAC;QAClD,MAAM,UAAU,GAAG,EAAE,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;QACpF,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QACvD,IAAI,gBAAgB,CAAC,GAAG,CAAC,cAAc,CAAC,qBAAqB,EAAE,UAAU,CAAC,CAAC;YAAE,SAAS;QACtF,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAC9D,QAAQ,CAAC,WAAW,EAAE,qBAAqB,EAAE,UAAU,EAAE,uBAAuB,CAAC,CAAC;YAClF,SAAS;QACX,CAAC;QACD,MAAM,UAAU,GAAG,WAAW,CAAC,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;QAC3F,IAAI,MAAM,KAAK,aAAa;YAC1B,QAAQ,CAAC,WAAW,EAAE,qBAAqB,EAAE,UAAU,EAAE,sBAAsB,CAAC,CAAC;aAC9E,IAAI,UAAU,KAAK,IAAI;YAC1B,QAAQ,CAAC,WAAW,EAAE,qBAAqB,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;aAClE,CAAC;YACJ,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACtE,IAAI,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/B,QAAQ,CAAC,WAAW,EAAE,qBAAqB,EAAE,UAAU,EAAE,sBAAsB,CAAC,CAAC;gBACjF,SAAS;YACX,CAAC;YACD,MAAM,WAAW,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;YACjC,MAAM,IAAI,GACR,WAAW,KAAK,SAAS;gBACzB,MAAM,CAAC,IAAI,KAAK,WAAW,CAAC,IAAI;gBAChC,MAAM,CAAC,WAAW,KAAK,WAAW,CAAC,WAAW;gBAC9C,MAAM,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM,CAAC;YACvC,OAAO,CACL,WAAW,EACX,qBAAqB,EACrB,YAAY,CAAC,IAAI,EAAE,WAAW,KAAK,SAAS,EAAE,IAAI,CAAC,EACnD,UAAU,CACX,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QACpC,MAAM,UAAU,GAAG,EAAE,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;QACpF,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QACvD,IAAI,gBAAgB,CAAC,GAAG,CAAC,cAAc,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;YAAE,SAAS;QACxE,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAC9D,QAAQ,CAAC,WAAW,EAAE,OAAO,EAAE,UAAU,EAAE,uBAAuB,CAAC,CAAC;YACpE,SAAS;QACX,CAAC;QACD,MAAM,UAAU,GAAG,WAAW,CAAC,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;QAC3F,IAAI,MAAM,KAAK,aAAa;YAC1B,QAAQ,CAAC,WAAW,EAAE,OAAO,EAAE,UAAU,EAAE,sBAAsB,CAAC,CAAC;aAChE,IAAI,UAAU,KAAK,IAAI;YAAE,QAAQ,CAAC,WAAW,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;aAChF,CAAC;YACJ,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACpE,IAAI,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/B,QAAQ,CAAC,WAAW,EAAE,OAAO,EAAE,UAAU,EAAE,sBAAsB,CAAC,CAAC;gBACnE,SAAS;YACX,CAAC;YACD,MAAM,WAAW,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;YACjC,MAAM,IAAI,GACR,WAAW,KAAK,SAAS;gBACzB,MAAM,CAAC,IAAI,KAAK,WAAW,CAAC,IAAI;gBAChC,MAAM,CAAC,WAAW,KAAK,WAAW,CAAC,WAAW,CAAC;YACjD,OAAO,CACL,WAAW,EACX,OAAO,EACP,YAAY,CAAC,IAAI,EAAE,WAAW,KAAK,SAAS,EAAE,IAAI,CAAC,EACnD,UAAU,CACX,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC1C,MAAM,UAAU,GAAG,EAAE,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;QACpF,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QACvD,IAAI,gBAAgB,CAAC,GAAG,CAAC,cAAc,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;YAAE,SAAS;QAC9E,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAC9D,QAAQ,CAAC,WAAW,EAAE,aAAa,EAAE,UAAU,EAAE,uBAAuB,CAAC,CAAC;YAC1E,SAAS;QACX,CAAC;QACD,MAAM,UAAU,GAAG,WAAW,CAAC,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;QAC3F,IAAI,MAAM,KAAK,aAAa,EAAE,CAAC;YAC7B,QAAQ,CAAC,WAAW,EAAE,aAAa,EAAE,UAAU,EAAE,sBAAsB,CAAC,CAAC;YACzE,SAAS;QACX,CAAC;QACD,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;YACxB,QAAQ,CAAC,WAAW,EAAE,aAAa,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;YAC7D,SAAS;QACX,CAAC;QACD,IAAI,MAAM,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;YAChC,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;YAClE,MAAM,gBAAgB,GAAG,WAAW,CAAC,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;YAC7F,IAAI,gBAAgB,KAAK,IAAI,EAAE,CAAC;gBAC9B,QAAQ,CAAC,WAAW,EAAE,aAAa,EAAE,UAAU,EAAE,gBAAgB,CAAC,CAAC;gBACnE,SAAS;YACX,CAAC;QACH,CAAC;QACD,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC1E,IAAI,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/B,QAAQ,CAAC,WAAW,EAAE,aAAa,EAAE,UAAU,EAAE,sBAAsB,CAAC,CAAC;YACzE,SAAS;QACX,CAAC;QACD,MAAM,WAAW,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;QACjC,IACE,WAAW,KAAK,SAAS;YACzB,cAAc,CAAC,WAAW,CAAC,WAAW,IAAI,EAAE,CAAC,KAAK,cAAc,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC,EAC1F,CAAC;YACD,QAAQ,CAAC,WAAW,EAAE,aAAa,EAAE,UAAU,EAAE,qBAAqB,CAAC,CAAC;YACxE,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GACR,WAAW,KAAK,SAAS;YACzB,MAAM,CAAC,IAAI,KAAK,WAAW,CAAC,IAAI;YAChC,MAAM,CAAC,WAAW,KAAK,WAAW,CAAC,WAAW,CAAC;QACjD,OAAO,CACL,WAAW,EACX,aAAa,EACb,YAAY,CAAC,IAAI,EAAE,WAAW,KAAK,SAAS,EAAE,IAAI,CAAC,EACnD,UAAU,CACX,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,iBAAiB,EAAE,CAAC;QAChD,MAAM,UAAU,GAAG,EAAE,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;QAChG,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QACvD,IAAI,gBAAgB,CAAC,GAAG,CAAC,cAAc,CAAC,mBAAmB,EAAE,UAAU,CAAC,CAAC;YAAE,SAAS;QACpF,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAC9D,QAAQ,CAAC,WAAW,EAAE,mBAAmB,EAAE,UAAU,EAAE,uBAAuB,CAAC,CAAC;YAChF,SAAS;QACX,CAAC;QACD,MAAM,UAAU,GAAG,WAAW,CAAC,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;QAC3F,IAAI,MAAM,KAAK,aAAa;YAC1B,QAAQ,CAAC,WAAW,EAAE,mBAAmB,EAAE,UAAU,EAAE,sBAAsB,CAAC,CAAC;aAC5E,IAAI,UAAU,KAAK,IAAI;YAC1B,QAAQ,CAAC,WAAW,EAAE,mBAAmB,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;aAChE,CAAC;YACJ,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;YAC3D,IAAI,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/B,QAAQ,CAAC,WAAW,EAAE,mBAAmB,EAAE,UAAU,EAAE,sBAAsB,CAAC,CAAC;gBAC/E,SAAS;YACX,CAAC;YACD,MAAM,WAAW,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;YACjC,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU,EAAE,CAAC;gBAC9E,QAAQ,CAAC,WAAW,EAAE,mBAAmB,EAAE,UAAU,EAAE,qBAAqB,CAAC,CAAC;gBAC9E,SAAS;YACX,CAAC;YACD,MAAM,IAAI,GACR,WAAW,KAAK,SAAS;gBACzB,MAAM,CAAC,WAAW,KAAK,WAAW,CAAC,WAAW;gBAC9C,MAAM,CAAC,mBAAmB,KAAK,WAAW,CAAC,mBAAmB;gBAC9D,MAAM,CAAC,uBAAuB,KAAK,WAAW,CAAC,uBAAuB;gBACtE,MAAM,CAAC,mBAAmB,KAAK,WAAW,CAAC,mBAAmB,CAAC;YACjE,OAAO,CACL,WAAW,EACX,mBAAmB,EACnB,YAAY,CAAC,IAAI,EAAE,WAAW,KAAK,SAAS,EAAE,IAAI,CAAC,EACnD,UAAU,CACX,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,mBAAmB,GAAG,IAAI,GAAG,CACjC,QAAQ,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CACvC,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,cAAc,EAAE,EAAE,CAC1C,GAAG,CACD,cAAc,CAAC,GAAG,CAAC,gBAAgB,CAAC,EACpC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,EAC7B,cAAc,CAAC,cAAc,CAAC,CAC/B,CACF,CACF,CACF,CAAC;IACF,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,wBAAwB,EAAE,CAAC;QACvD,MAAM,UAAU,GAAG,EAAE,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;QAC9F,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QACvD,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;QAC9D,IAAI,gBAAgB,CAAC,GAAG,CAAC,cAAc,CAAC,0BAA0B,EAAE,UAAU,CAAC,CAAC;YAAE,SAAS;QAC3F,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAC9D,QAAQ,CAAC,WAAW,EAAE,0BAA0B,EAAE,UAAU,EAAE,uBAAuB,CAAC,CAAC;YACvF,SAAS;QACX,CAAC;QACD,IAAI,KAAK,GACP,MAAM,KAAK,aAAa;YACtB,CAAC,CAAC,sBAAsB;YACxB,CAAC,CAAC,WAAW,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;QAClE,KAAK,MAAM,cAAc,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACrD,IAAI,KAAK,KAAK,IAAI;gBAAE,MAAM;YAC1B,MAAM,aAAa,GAAG,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,cAAc,CAAC,CAAC,CAAC;YAClE,IACE,mBAAmB,CAAC,GAAG,CAAC,aAAa,CAAC;gBACtC,eAAe,CAAC,WAAW,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,KAAK,UAAU;gBAE9D,SAAS;YACX,MAAM,SAAS,GACb,QAAQ,CAAC,WAAW,CAAC,IAAI,CACvB,CAAC,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,cAAc,CAAC,cAAc,CAAC,CACrE;gBACD,QAAQ,CAAC,WAAW,CAAC,IAAI,CACvB,CAAC,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,cAAc,CAAC,cAAc,CAAC,CACrE,CAAC;YACJ,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,oBAAoB,CAAC;QACrE,CAAC;QACD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,QAAQ,CAAC,WAAW,EAAE,0BAA0B,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;YACrE,SAAS;QACX,CAAC;QACD,MAAM,aAAa,GAAG,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAC5D,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAC7F,CAAC,MAAM,CAAC;QACT,MAAM,MAAM,GACV,aAAa,KAAK,MAAM,CAAC,gBAAgB,CAAC,MAAM;YAC9C,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,aAAa,KAAK,CAAC;gBACnB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,SAAS,CAAC;QAClB,OAAO,CAAC,WAAW,EAAE,0BAA0B,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;IACvE,CAAC;IAED,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QACpC,MAAM,UAAU,GAAG,EAAE,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;QACxF,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QACxD,IAAI,gBAAgB,CAAC,GAAG,CAAC,cAAc,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;YAAE,SAAS;QACxE,IAAI,oBAAoB,KAAK,IAAI,IAAI,MAAM,KAAK,oBAAoB,EAAE,CAAC;YACrE,QAAQ,CACN,WAAW,EACX,OAAO,EACP,EAAE,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,EAAE,KAAK,EAAE,YAAY,EAAE,EACpE,uBAAuB,CACxB,CAAC;YACF,SAAS;QACX,CAAC;QACD,MAAM,UAAU,GAAG,WAAW,CAAC,qBAAqB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7F,IAAI,MAAM,KAAK,aAAa;YAC1B,QAAQ,CAAC,WAAW,EAAE,OAAO,EAAE,UAAU,EAAE,sBAAsB,CAAC,CAAC;aAChE,IAAI,UAAU,KAAK,IAAI;YAAE,QAAQ,CAAC,WAAW,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;aAChF,CAAC;YACJ,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACtE,IAAI,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/B,QAAQ,CAAC,WAAW,EAAE,OAAO,EAAE,UAAU,EAAE,sBAAsB,CAAC,CAAC;gBACnE,SAAS;YACX,CAAC;YACD,MAAM,WAAW,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;YACjC,OAAO,CACL,WAAW,EACX,OAAO,EACP,YAAY,CACV,IAAI,EACJ,WAAW,KAAK,SAAS,EACzB,WAAW,KAAK,SAAS,IAAI,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,CAC9D,EACD,UAAU,CACX,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,aAAa,GAAG,IAAI,GAAG,CAC3B,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAC7B,GAAG,CACD,cAAc,CAAC,GAAG,CAAC,iBAAiB,CAAC,EACrC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,EAC1B,cAAc,CAAC,GAAG,CAAC,gBAAgB,CAAC,EACpC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAC9B,CACF,CACF,CAAC;IACF,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,qBAAqB,EAAE,CAAC;QACpD,MAAM,UAAU,GAAG;YACjB,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;YAC3C,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B,CAAC;QACF,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QACxD,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QACvD,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;QAC9D,IAAI,gBAAgB,CAAC,GAAG,CAAC,cAAc,CAAC,uBAAuB,EAAE,UAAU,CAAC,CAAC;YAAE,SAAS;QACxF,IAAI,KAAK,GAAsC,IAAI,CAAC;QACpD,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,MAAM,CAAC,gBAAgB,CAAC;YAAE,KAAK,GAAG,uBAAuB,CAAC;aAC1F,IAAI,oBAAoB,KAAK,IAAI,IAAI,MAAM,KAAK,oBAAoB;YACvE,KAAK,GAAG,uBAAuB,CAAC;aAC7B,IAAI,MAAM,KAAK,aAAa,IAAI,MAAM,KAAK,aAAa;YAAE,KAAK,GAAG,sBAAsB,CAAC;aACzF,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,UAAU,EAAE,CAAC;YAC3F,MAAM,SAAS,GACb,QAAQ,CAAC,KAAK,CAAC,IAAI,CACjB,CAAC,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CACtE;gBACD,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC7F,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,oBAAoB,CAAC;QACrE,CAAC;aAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,UAAU,EAAE,CAAC;YAC7F,MAAM,SAAS,GACb,QAAQ,CAAC,KAAK,CAAC,IAAI,CACjB,CAAC,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,CACvE;gBACD,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;YAC9F,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,oBAAoB,CAAC;QACrE,CAAC;QACD,IAAI,KAAK,KAAK,IAAI;YAChB,QAAQ,CACN,WAAW,EACX,uBAAuB,EACvB,KAAK,KAAK,uBAAuB;gBAC/B,CAAC,CAAC;oBACE,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;oBAC3C,KAAK,EAAE,YAAY;oBACnB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;oBACzC,SAAS,EAAE,MAAM,CAAC,SAAS;iBAC5B;gBACH,CAAC,CAAC,UAAU,EACd,KAAK,CACN,CAAC;;YAEF,OAAO,CACL,WAAW,EACX,uBAAuB,EACvB,aAAa,CAAC,GAAG,CACf,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CACrF;gBACC,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,SAAS,EACb,UAAU,CACX,CAAC;IACN,CAAC;IAED,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC,GAAG,EAAE,EAAE,CAC/D,GAAG,CACD,cAAc,CAAC,GAAG,CAAC,iBAAiB,CAAC,EACrC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,EAC1B,cAAc,CAAC,GAAG,CAAC,gBAAgB,CAAC,EACpC,GAAG,CAAC,UAAU,CACf,CACF,CAAC;IACF,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,iBAAiB,EAAE,CAAC;QAChD,MAAM,UAAU,GAAG;YACjB,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;YAC3C,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,UAAU,EAAE,MAAM,CAAC,UAAU;SAC9B,CAAC;QACF,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QACxD,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QACvD,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3D,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,gBAAgB,CAAC,GAAG,CAAC,cAAc,CAAC,mBAAmB,EAAE,UAAU,CAAC,CAAC;YAAE,SAAS;QACpF,IAAI,KAAK,GAAsC,IAAI,CAAC;QACpD,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,MAAM,CAAC,gBAAgB,CAAC;YAAE,KAAK,GAAG,uBAAuB,CAAC;aAC1F,IAAI,oBAAoB,KAAK,IAAI,IAAI,MAAM,KAAK,oBAAoB;YACvE,KAAK,GAAG,uBAAuB,CAAC;aAC7B,IAAI,MAAM,KAAK,aAAa,IAAI,MAAM,KAAK,aAAa;YAAE,KAAK,GAAG,sBAAsB,CAAC;aACzF,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,UAAU;YACxF,KAAK,GAAG,oBAAoB,CAAC;aAC1B,IACH,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC;YAC7B,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,KAAK,UAAU,EACpD,CAAC;YACD,MAAM,SAAS,GACb,QAAQ,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU,CAAC;gBAC9E,QAAQ,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU,CAAC,CAAC;YAChF,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,oBAAoB,CAAC;QACrE,CAAC;QACD,MAAM,SAAS,GACb,QAAQ,CAAC,iBAAiB,CAAC,IAAI,CAC7B,CAAC,UAAU,EAAE,EAAE,CACb,cAAc,CAAC,UAAU,CAAC,gBAAgB,CAAC,KAAK,MAAM;YACtD,UAAU,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU,CAC9C,EAAE,UAAU,IAAI,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC;QACzD,IACE,KAAK,KAAK,IAAI;YACd,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,kBAAkB,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,EAC/E,CAAC;YACD,KAAK,GAAG,gBAAgB,CAAC;QAC3B,CAAC;QACD,IAAI,KAAK,KAAK,IAAI;YAChB,QAAQ,CACN,WAAW,EACX,mBAAmB,EACnB,KAAK,KAAK,uBAAuB;gBAC/B,CAAC,CAAC;oBACE,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;oBAC3C,KAAK,EAAE,YAAY;oBACnB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;oBACzC,UAAU,EAAE,MAAM,CAAC,UAAU;iBAC9B;gBACH,CAAC,CAAC,UAAU,EACd,KAAK,CACN,CAAC;aACC,CAAC;YACJ,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAC7B,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,CACtE,CAAC;YACF,IAAI,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/B,QAAQ,CAAC,WAAW,EAAE,mBAAmB,EAAE,UAAU,EAAE,sBAAsB,CAAC,CAAC;gBAC/E,SAAS;YACX,CAAC;YACD,MAAM,WAAW,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;YACjC,OAAO,CACL,WAAW,EACX,mBAAmB,EACnB,YAAY,CACV,IAAI,EACJ,WAAW,KAAK,SAAS,EACzB,WAAW,KAAK,SAAS,IAAI,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,CACxE,EACD,UAAU,CACX,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtC,MAAM,UAAU,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;QACnD,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QACxD,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QACvD,IAAI,gBAAgB,CAAC,GAAG,CAAC,cAAc,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;YAAE,SAAS;QAC1E,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAC9D,QAAQ,CAAC,WAAW,EAAE,SAAS,EAAE,UAAU,EAAE,uBAAuB,CAAC,CAAC;YACtE,SAAS;QACX,CAAC;QACD,IAAI,oBAAoB,KAAK,IAAI,IAAI,MAAM,KAAK,oBAAoB,EAAE,CAAC;YACrE,QAAQ,CAAC,WAAW,EAAE,SAAS,EAAE,UAAU,EAAE,uBAAuB,CAAC,CAAC;YACtE,SAAS;QACX,CAAC;QACD,IAAI,MAAM,KAAK,aAAa,IAAI,MAAM,KAAK,aAAa,EAAE,CAAC;YACzD,QAAQ,CAAC,WAAW,EAAE,SAAS,EAAE,UAAU,EAAE,sBAAsB,CAAC,CAAC;YACrE,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/B,QAAQ,CAAC,WAAW,EAAE,SAAS,EAAE,UAAU,EAAE,sBAAsB,CAAC,CAAC;YACrE,SAAS;QACX,CAAC;QACD,MAAM,WAAW,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;QACjC,IACE,WAAW,KAAK,SAAS;YACzB,CAAC,cAAc,CAAC,WAAW,CAAC,iBAAiB,CAAC,KAAK,MAAM;gBACvD,cAAc,CAAC,WAAW,CAAC,gBAAgB,CAAC,KAAK,MAAM,CAAC,EAC1D,CAAC;YACD,QAAQ,CAAC,WAAW,EAAE,SAAS,EAAE,UAAU,EAAE,qBAAqB,CAAC,CAAC;YACpE,SAAS;QACX,CAAC;QACD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,aAAa,GAAG,WAAW,CAC/B,qBAAqB,CAAC,GAAG,CAAC,MAAM,CAAC,EACjC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAC1B,CAAC;YACF,MAAM,aAAa,GAAG,WAAW,CAAC,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;YAC9F,IAAI,aAAa,KAAK,IAAI,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;gBACrD,QAAQ,CACN,WAAW,EACX,SAAS,EACT,UAAU,EACV,aAAa,IAAI,aAAa,IAAI,oBAAoB,CACvD,CAAC;gBACF,SAAS;YACX,CAAC;QACH,CAAC;QACD,IACE,WAAW,KAAK,SAAS;YACzB,CAAC,WAAW,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW;gBAC7C,WAAW,CAAC,gBAAgB,KAAK,MAAM,CAAC,gBAAgB,CAAC,EAC3D,CAAC;YACD,QAAQ,CAAC,WAAW,EAAE,SAAS,EAAE,UAAU,EAAE,qBAAqB,CAAC,CAAC;YACpE,SAAS;QACX,CAAC;QACD,OAAO,CACL,WAAW,EACX,SAAS,EACT,YAAY,CACV,IAAI,EACJ,WAAW,KAAK,SAAS,EACzB,WAAW,KAAK,SAAS,IAAI,wBAAwB,CAAC,MAAM,EAAE,WAAW,CAAC,CAC3E,EACD,UAAU,EACV,WAAW,KAAK,SAAS,IAAI,MAAM,CAAC,WAAW,KAAK,cAAc,CACnE,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,uBAAuB,CAAC,KAAK,CAAC;QAC3C,IAAI;QACJ,OAAO,EAAE,WAAW,CAAC,OAAO;QAC5B,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC;QACnF,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC;KACjD,CAAC,CAAC;IACH,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;AACxC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,QAA6B,EAC7B,IAA2B;IAE3B,OAAO,sBAAsB,CAC3B,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,4BAA4B,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CACxE,CAAC;AACJ,CAAC"}

package/dist/portability/repository.d.ts

@@ -0,0 +1,95 @@
+/** Explicit PostgreSQL reads used by selective portability export. */
+import type { PoolClient } from 'pg';
+import type { PortabilityApplication, PortabilityApplicationModule, PortabilityApplicationSelection, PortabilityClaimDefinition, PortabilityOrganization, PortabilityPermission, PortabilityRole, PortabilityRolePermissionMapping, PortabilityScope, PortabilityUser, PortabilityUserClaimValue, PortabilityUserRoleAssignment, PortabilityClient } from './types.js';
+/** Resolved organization scope with internal keys kept outside the manifest. */
+export interface ResolvedOrganizationExportScope {
+    /** Internal identifiers used only to qualify dependent reads. */
+    readonly organizationIds: readonly string[];
+    /** Portable organization records. */
+    readonly organizations: readonly PortabilityOrganization[];
+}
+/** Resolved application selection with internal keys kept outside the manifest. */
+export interface ResolvedApplicationExportSelection {
+    /** Internal identifiers used only to qualify dependent reads. */
+    readonly applicationIds: readonly string[];
+    /** Portable selected applications. */
+    readonly applications: readonly PortabilityApplication[];
+}
+/** Portable authorization collections owned by selected applications. */
+export interface PortabilityAuthorizationGraph {
+    /** Selected application modules. */
+    readonly applicationModules: readonly PortabilityApplicationModule[];
+    /** Selected application roles. */
+    readonly roles: readonly PortabilityRole[];
+    /** Selected application permissions. */
+    readonly permissions: readonly PortabilityPermission[];
+    /** Selected application claim definitions. */
+    readonly claimDefinitions: readonly PortabilityClaimDefinition[];
+    /** Selected role-to-permission mappings. */
+    readonly rolePermissionMappings: readonly PortabilityRolePermissionMapping[];
+}
+/** Portable users and application-qualified relationship collections. */
+export interface PortabilityUserGraph {
+    /** Every user in the selected organization scope. */
+    readonly users: readonly PortabilityUser[];
+    /** Role assignments retained by the application selection. */
+    readonly userRoleAssignments: readonly PortabilityUserRoleAssignment[];
+    /** Claim values retained by the application selection. */
+    readonly userClaimValues: readonly PortabilityUserClaimValue[];
+}
+/**
+ * Resolve an organization or environment export scope while excluding the control plane.
+ *
+ * @param client - Request-owned PostgreSQL client
+ * @param scope - Validated public export scope
+ * @param controlPlaneOrganizationId - Authenticated control-plane organization identifier
+ * @returns Portable organizations and private identifiers for dependent reads
+ * @throws PortabilityError when an organization scope is missing or protected
+ */
+export declare function readOrganizationExportScope(client: PoolClient, scope: PortabilityScope, controlPlaneOrganizationId: string): Promise<ResolvedOrganizationExportScope>;
+/**
+ * Resolve the explicit global application selection and exclude Porta's Admin application.
+ *
+ * @param client - Request-owned PostgreSQL client
+ * @param selection - Validated all-or-explicit application choice
+ * @returns Portable applications and private identifiers for dependent reads
+ * @throws PortabilityError when an explicit slug is missing or selects the Admin application
+ */
+export declare function readApplicationExportSelection(client: PoolClient, selection: PortabilityApplicationSelection): Promise<ResolvedApplicationExportSelection>;
+/**
+ * Read the complete portable authorization graph for selected applications.
+ *
+ * @param client - Request-owned PostgreSQL client
+ * @param applicationIds - Resolved internal application identifiers
+ * @returns All portable child collections for those applications
+ */
+export declare function readAuthorizationExportGraph(client: PoolClient, applicationIds: readonly string[]): Promise<PortabilityAuthorizationGraph>;
+/**
+ * Attach validated stored branding bytes to portable organization records.
+ *
+ * @param client - Request-owned PostgreSQL client
+ * @param organizations - Portable organizations in the selected scope
+ * @param organizationIds - Matching private organization identifiers
+ * @returns Organization records with validated logo and favicon content
+ * @throws Error when stored bytes no longer satisfy the branding validation boundary
+ */
+export declare function attachOrganizationBrandingAssets(client: PoolClient, organizations: readonly PortabilityOrganization[], organizationIds: readonly string[]): Promise<readonly PortabilityOrganization[]>;
+/**
+ * Read every scoped user and only relationships owned by selected applications.
+ *
+ * @param client - Request-owned PostgreSQL client
+ * @param organizationIds - Resolved organization scope identifiers
+ * @param applicationIds - Resolved application selection identifiers
+ * @returns Portable users, role assignments, and claim values
+ */
+export declare function readUserExportGraph(client: PoolClient, organizationIds: readonly string[], applicationIds: readonly string[]): Promise<PortabilityUserGraph>;
+/**
+ * Read OIDC clients owned by both the selected organization and application scopes.
+ *
+ * @param client - Request-owned PostgreSQL client
+ * @param organizationIds - Resolved organization scope identifiers
+ * @param applicationIds - Resolved application selection identifiers
+ * @returns Portable clients without credential material
+ */
+export declare function readClientExportRecords(client: PoolClient, organizationIds: readonly string[], applicationIds: readonly string[]): Promise<readonly PortabilityClient[]>;
+//# sourceMappingURL=repository.d.ts.map

package/dist/portability/repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repository.d.ts","sourceRoot":"","sources":["../../src/portability/repository.ts"],"names":[],"mappings":"AAAA,sEAAsE;AAEtE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AACrC,OAAO,KAAK,EACV,sBAAsB,EACtB,4BAA4B,EAC5B,+BAA+B,EAC/B,0BAA0B,EAC1B,uBAAuB,EACvB,qBAAqB,EACrB,eAAe,EACf,gCAAgC,EAChC,gBAAgB,EAChB,eAAe,EACf,yBAAyB,EACzB,6BAA6B,EAC7B,iBAAiB,EAElB,MAAM,YAAY,CAAC;AAyFpB,gFAAgF;AAChF,MAAM,WAAW,+BAA+B;IAC9C,iEAAiE;IACjE,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,qCAAqC;IACrC,QAAQ,CAAC,aAAa,EAAE,SAAS,uBAAuB,EAAE,CAAC;CAC5D;AAED,mFAAmF;AACnF,MAAM,WAAW,kCAAkC;IACjD,iEAAiE;IACjE,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,sCAAsC;IACtC,QAAQ,CAAC,YAAY,EAAE,SAAS,sBAAsB,EAAE,CAAC;CAC1D;AAED,yEAAyE;AACzE,MAAM,WAAW,6BAA6B;IAC5C,oCAAoC;IACpC,QAAQ,CAAC,kBAAkB,EAAE,SAAS,4BAA4B,EAAE,CAAC;IACrE,kCAAkC;IAClC,QAAQ,CAAC,KAAK,EAAE,SAAS,eAAe,EAAE,CAAC;IAC3C,wCAAwC;IACxC,QAAQ,CAAC,WAAW,EAAE,SAAS,qBAAqB,EAAE,CAAC;IACvD,8CAA8C;IAC9C,QAAQ,CAAC,gBAAgB,EAAE,SAAS,0BAA0B,EAAE,CAAC;IACjE,4CAA4C;IAC5C,QAAQ,CAAC,sBAAsB,EAAE,SAAS,gCAAgC,EAAE,CAAC;CAC9E;AAED,yEAAyE;AACzE,MAAM,WAAW,oBAAoB;IACnC,qDAAqD;IACrD,QAAQ,CAAC,KAAK,EAAE,SAAS,eAAe,EAAE,CAAC;IAC3C,8DAA8D;IAC9D,QAAQ,CAAC,mBAAmB,EAAE,SAAS,6BAA6B,EAAE,CAAC;IACvE,0DAA0D;IAC1D,QAAQ,CAAC,eAAe,EAAE,SAAS,yBAAyB,EAAE,CAAC;CAChE;AAuED;;;;;;;;GAQG;AACH,wBAAsB,2BAA2B,CAC/C,MAAM,EAAE,UAAU,EAClB,KAAK,EAAE,gBAAgB,EACvB,0BAA0B,EAAE,MAAM,GACjC,OAAO,CAAC,+BAA+B,CAAC,CAyB1C;AAED;;;;;;;GAOG;AACH,wBAAsB,8BAA8B,CAClD,MAAM,EAAE,UAAU,EAClB,SAAS,EAAE,+BAA+B,GACzC,OAAO,CAAC,kCAAkC,CAAC,CAwB7C;AAED;;;;;;GAMG;AACH,wBAAsB,4BAA4B,CAChD,MAAM,EAAE,UAAU,EAClB,cAAc,EAAE,SAAS,MAAM,EAAE,GAChC,OAAO,CAAC,6BAA6B,CAAC,CAoIxC;AAED;;;;;;;;GAQG;AACH,wBAAsB,gCAAgC,CACpD,MAAM,EAAE,UAAU,EAClB,aAAa,EAAE,SAAS,uBAAuB,EAAE,EACjD,eAAe,EAAE,SAAS,MAAM,EAAE,GACjC,OAAO,CAAC,SAAS,uBAAuB,EAAE,CAAC,CAuC7C;AAED;;;;;;;GAOG;AACH,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,UAAU,EAClB,eAAe,EAAE,SAAS,MAAM,EAAE,EAClC,cAAc,EAAE,SAAS,MAAM,EAAE,GAChC,OAAO,CAAC,oBAAoB,CAAC,CAwF/B;AAED;;;;;;;GAOG;AACH,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE,UAAU,EAClB,eAAe,EAAE,SAAS,MAAM,EAAE,EAClC,cAAc,EAAE,SAAS,MAAM,EAAE,GAChC,OAAO,CAAC,SAAS,iBAAiB,EAAE,CAAC,CAwDvC"}